The commit herehttps://review.coreboot.org/cgit/board-status.git/commit/?id=72945dee4c60b90cdf6c507f4847c26028a56a09tells me for example that the MAC address from Paul Menzel isbc:5f:f4:c8:d3:98 .The mac address from the WLAN Router Patrick Georgi is using is based onthis commithttps://review.coreboot.org/cgit/board-status.git/commit/?id=addd59d8fb55dc62a7d8e9ec730612f63fc5d61athe mac 70:3a:cb:bd:fd:e3 . This is probably some Google device hisdevice is connecting to because the mac range is registered to GoogleInc. Now i can lookup in public wifi databases and in some cases i thenknow where the users lives.The mac address from Chris Thompson is 6c:f0:49:47:22:4d based onhttps://review.coreboot.org/cgit/board-status.git/commit/?id=da41a5a88bebc9ffbe2cbc9a38a5fba530496daf

And the mac address from Denis 'GNUtoo' Carikli who is using parabola asos was using a Hitachi HDP725050GLA360 with firmware GM4OA52A and asecond WDC WD5000AAKB-00YSA0 with firmware 12.01C02 and have switchednow to a ST9160314AS with 0002SDM1 firmware. His mac address of one ofhis computers is bc:5f:f4:9c:b7:32 . In this computer he is using aKINGSTON SV300S37A240G with firmware 603ABBF0 .

I was thinking of contributing to the Board Status but i dont want torelease any private data and wont contribute now. What is the usage ofthe world to know what mac address the people are using?

Please fix this to:1) Remove kernel log and replace it with "uname -r" to just know thekernel version.2) Please make the contribution without the force of having to registerto git. Make a public account that have just access to theboard-status.git and set this public account into the code itself. Thenthere can be for example a simple live linux iso that people can bootwith LAN cable connected. No requirement of installation software, ofsetting things up or anything like that.

Post by j***@goat.sithe mac 70:3a:cb:bd:fd:e3 . This is probably some Google device hisdevice is connecting to because the mac range is registered to GoogleInc. Now i can lookup in public wifi databases and in some cases i thenknow where the users lives.

You can also just ask them where they live. Whereby I want to say, noteverybody is in the same paranoid mode.

Post by j***@goat.siI was thinking of contributing to the Board Status but i dont want torelease any private data and wont contribute now. What is the usage ofthe world to know what mac address the people are using?

There is no usage. It just makes the script simpler that gathers theinformation.No, you, please fix this. You are very welcome to contribute patches.

Post by j***@goat.si1) Remove kernel log and replace it with "uname -r" to just know thekernel version.

This makes no sense, nobody asked for the kernel version. We want to seekernel messages. You can however implement a heuristic to filter per-sonal information.

Post by j***@goat.si2) Please make the contribution without the force of having to registerto git. Make a public account that have just access to theboard-status.git and set this public account into the code itself.

You are free to set something like this up and redirect all pushes toyour Gerrit account. *After* you filtered spam.

Post by j***@goat.siThenthere can be for example a simple live linux iso that people can bootwith LAN cable connected. No requirement of installation software, ofsetting things up or anything like that.

Yes, please implement that. Again patches are welcome. We don't lackideas, we lack the time to set things up. So once you are done withthat, feel free to ask what else you can do.

I've already raised this board_status.sh issue a few months earlier,together with the proposed fix (which I forgot to transform into apatch, perhaps because no one replied to me) -https://mail.coreboot.org/pipermail/coreboot/2018-April/086488.html .It could be hard to create an automatic filter which will successfullyerase all the information that you believe is private, and also therecould be different estimates of what is private and what is not.Perhaps the easiest solution is just to insert a pause beforeuploading the results, so that a user could use this pause to removethe log parts that he considers as private. Also, this way only theuser will be responsible for removing his private information andthere wouldn't be any complains like "your script didn't remove X andsome 3-letter-agency hacked me by using this knowledge"

Post by j***@goat.sithe mac 70:3a:cb:bd:fd:e3 . This is probably some Google device hisdevice is connecting to because the mac range is registered to GoogleInc. Now i can lookup in public wifi databases and in some cases i thenknow where the users lives.

You can also just ask them where they live. Whereby I want to say, noteverybody is in the same paranoid mode.

Post by j***@goat.siI was thinking of contributing to the Board Status but i dont want torelease any private data and wont contribute now. What is the usage ofthe world to know what mac address the people are using?

There is no usage. It just makes the script simpler that gathers theinformation.No, you, please fix this. You are very welcome to contribute patches.

Post by j***@goat.si1) Remove kernel log and replace it with "uname -r" to just know thekernel version.

This makes no sense, nobody asked for the kernel version. We want to seekernel messages. You can however implement a heuristic to filter per-sonal information.

Post by j***@goat.si2) Please make the contribution without the force of having to registerto git. Make a public account that have just access to theboard-status.git and set this public account into the code itself.

You are free to set something like this up and redirect all pushes toyour Gerrit account. *After* you filtered spam.

Post by j***@goat.siThenthere can be for example a simple live linux iso that people can bootwith LAN cable connected. No requirement of installation software, ofsetting things up or anything like that.

Yes, please implement that. Again patches are welcome. We don't lackideas, we lack the time to set things up. So once you are done withthat, feel free to ask what else you can do.Nico--https://mail.coreboot.org/mailman/listinfo/coreboot

Post by j***@goat.siI was thinking of contributing to the Board Status but i dont want torelease any private data and wont contribute now. What is the usage ofthe world to know what mac address the people are using?

Thanks for pointing out these issues.

For what it's worth, the user must use the '-u' option to upload results.And as Arthur points out you can edit logs and such yourself to scrub anyprivate data. The script just automates a few steps for convenience, thoughobviously we'd like a reasonably uniform data set to compare with. You'reright that we don't need to know anyone's MAC address for corebootdevelopment; however as others have pointed out a full kernel log is usefulsince firmware issues often manifest themselves there (memory mapincorrect, devices not enabled, etc) so it's good to have them forcomparison.

Still, a pause as Mike suggested and perhaps a scary warning or two couldbe useful.

Then there can be for example a simple live linux iso that people can boot

Post by j***@goat.siwith LAN cable connected. No requirement of installation software, ofsetting things up or anything like that.

Sounds like something that should be pretty simple to automate in theuploader script? While it's probably good to also have a warning andclarify that the final obligation lies with the uploader, there's noreason we can't help them by adding sanitization for common issues aswe find them.

We're doing something similar when we collect Chrome OS crash reports(these don't get made public so the impact isn't as high, but thebasic idea is the same), so we could just steal or at least takeinspiration from that code:https://chromium.googlesource.com/chromiumos/platform2/+/master/crash-reporter/crash_collector.cc#262

Post by j***@goat.siI was thinking of contributing to the Board Status but i dont want torelease any private data and wont contribute now. What is the usage ofthe world to know what mac address the people are using?

Thanks for pointing out these issues.For what it's worth, the user must use the '-u' option to upload results. And as Arthur points out you can edit logs and such yourself to scrub any private data. The script just automates a few steps for convenience, though obviously we'd like a reasonably uniform data set to compare with. You're right that we don't need to know anyone's MAC address for coreboot development; however as others have pointed out a full kernel log is useful since firmware issues often manifest themselves there (memory map incorrect, devices not enabled, etc) so it's good to have them for comparison.Still, a pause as Mike suggested and perhaps a scary warning or two could be useful.

Post by j***@goat.siThen there can be for example a simple live linux iso that people can bootwith LAN cable connected. No requirement of installation software, ofsetting things up or anything like that.

There is one - See util/board_status/set_up_live_image.sh .--https://mail.coreboot.org/mailman/listinfo/coreboot